Author: admin

The figures come from the 2022 Interim Cyber Threat Report by Deep Instinct

The guidelines describe methods threat actors use to steal MFA credentials and how to defend against them

Emergency operations are continuing, but the hospital system failed and cannot be accessed

That bated-breath OpenSSL update is out! It’s no longer rated CRITICAL, but we advise you to patch ASAP anyway. Here’s why…

Insurer says claimants have risen in nearly every sector

Regulator’s order requires firm to improve data security practices

UK security agency helps organizations with early warning service

It’s Iran’s turn to have its digital surveillance tools leaked:

According to these internal documents, SIAM is a computer system that works behind the scenes of Iranian cellular networks, providing its operators a broad menu of remote commands to alter, disrupt, and monitor how customers use their phones. The tools can slow their data connections to a crawl, break the encryption of phone calls, track the movements of individuals or large groups, and produce detailed metadata summaries of who spoke to whom, when, and where. Such a system could help the government invisibly quash the ongoing protests ­—or those of tomorrow ­—an expert who reviewed the SIAM documents told The Intercept.

[…]

SIAM gives the government’s Communications Regulatory Authority ­—Iran’s telecommunications regulator ­—turnkey access to the activities and capabilities of the country’s mobile users. “Based on CRA rules and regulations all telecom operators must provide CRA direct access to their system for query customers information and change their services via web service,” reads an English-language document obtained by The Intercept. (Neither the CRA nor Iran’s mission to the United Nations responded to a requests for comment.)

Lots of details, and links to the leaked documents, at the Intercept webpage.

As everyone waits for news of a bug in OpenSSL, here’s a reminder that other cryptographic code in your life may also need patching!

The researchers were able to obtain the ZIP file containing the samples for the data breach